| Age | Commit message (Expand) | Author |
|---|
| 2018-12-27 | Check for main ruleset explicitly | kn |
| 2018-12-17 | Rename pf_anchor_remove() to pf_remove_anchor() | kn |
| 2018-12-17 | Use timeout_add_sec() instead of timeout_add() with a multiplication with hz | Claudio Jeker |
| 2018-12-10 | Remove useless macros | kn |
| 2018-10-01 | Allow DIOCRGETADDRS when securelevel(7) > 1 | kn |
| 2018-09-11 | - moving state look up outside of PF_LOCK() | Alexandr Nedvedicky |
| 2018-07-22 | Fix arguments of pf_purge_expired_{src_nodes,rules}() | Stefan Fritsch |
| 2018-07-10 | provide a generic packet delay functionality. packets to be delayed are marked | Henning Brauer |
| 2018-04-24 | Use pf_rm_rule() instead of pool_put() to decrement references by | Alexander Bluhm |
| 2018-04-13 | Remove compatibility with pfctl from 6.1 and plug a few leaks | Mike Belopuhov |
| 2018-04-05 | Explicitly check PF_TRANS_RULESET in DIOCXBEGIN, DIOCXCOMMIT, and DIOCXROLLBACK. | Lawrence Teo |
| 2018-02-08 | add DIOCGETSYNFLWATS to get current synflood detection watermarks, | Henning Brauer |
| 2018-02-07 | look ma, henning forgot to PF_LOCK/_UNLOCK in the new ioctls, ok procter | Henning Brauer |
| 2018-02-06 | syncookies for pf. | Henning Brauer |
| 2018-02-06 | some finger muscle workout: | Henning Brauer |
| 2018-01-19 | In pfioctl() a pf unlock was missing in the error path. | Alexander Bluhm |
| 2017-11-28 | The divert structure was using the port number to indicate that | Alexander Bluhm |
| 2017-11-13 | add a generic packet rate matching filter. allows things like | Henning Brauer |
| 2017-10-31 | - add one more softnet taskq | Alexandr Nedvedicky |
| 2017-10-30 | - fine tuning PF_LOCK in pfioctl() | Alexandr Nedvedicky |
| 2017-08-11 | Remove NET_LOCK()'s argument. | Martin Pieuchot |
| 2017-08-06 | Reduce contention on the NET_LOCK() by moving the logic of the pfpurge | Martin Pieuchot |
| 2017-07-27 | For pf the anchor is a C string so ensure that the value passed in via ioctl | Claudio Jeker |
| 2017-07-19 | Rework HFSC vs FQ-CoDel checks | Mike Belopuhov |
| 2017-07-05 | Convert pf tagname malloc(9) into pool_get(9) to make it MP safe. | Alexander Bluhm |
| 2017-06-28 | Introduce a simple mechanism to select the appropriate queue manager | Mike Belopuhov |
| 2017-06-28 | Tighten up FQ-CoDel vs HFSC checks | Mike Belopuhov |
| 2017-06-05 | - let's add PF_LOCK() | Alexandr Nedvedicky |
| 2017-06-01 | Return time_uptime as value for when pf was enabled instead of | Patrick Wildt |
| 2017-05-30 | g/c DIOCCLRRULECTRS | Henning Brauer |
| 2017-05-15 | Enable the NET_LOCK(), take 3. | Martin Pieuchot |
| 2017-05-15 | Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8) | Mike Belopuhov |
| 2017-05-02 | Provide pluggable queueing interface for pf | Mike Belopuhov |
| 2017-04-21 | Speed up DIOCKILLSTATES by using the RB tree index if all fields used | YASUOKA Masahiko |
| 2017-03-17 | Revert the NET_LOCK() and bring back pf's contention lock for release. | Martin Pieuchot |
| 2017-01-30 | removes the pf_consistency_lock and protects the users with | Sebastian Benoit |
| 2017-01-24 | A space here, a space there. Soon we're talking real whitespace | Kenneth R Westerback |
| 2016-11-16 | Kill recursive splsoftnet()s. | Martin Pieuchot |
| 2016-10-28 | - once rule should not attempt to remove its parent rule. | Alexandr Nedvedicky |
| 2016-10-26 | Put union pf_headers and struct pf_pdesc into separate header file | Alexander Bluhm |
| 2016-09-27 | roll back turning RB into RBT until i get better at this process. | David Gwynne |
| 2016-09-27 | move pf from the RB macros to the RBT functions. | David Gwynne |
| 2016-09-15 | all pools have their ipl set via pool_setipl, so fold it into pool_init. | David Gwynne |
| 2016-09-03 | Let purge thread to remove once rules, not packets. | Alexandr Nedvedicky |
| 2016-09-02 | pool_setipl for pf bits | David Gwynne |
| 2015-12-03 | Add sizes to most free calls. OK sashan@ tedu@ | Claudio Jeker |
| 2015-12-03 | allocate PF tags as M_RTABLE vice M_TEMP | Bret Lambert |
| 2015-12-03 | Rename pf_unlink_state() to pf_remove_state() so the name does not | Alexander Bluhm |
| 2015-11-24 | No need for <net/if_types.h> | Martin Pieuchot |
| 2015-11-23 | There's no longer a need to include <net/hfsc.h> in <net/if_var.h> | Martin Pieuchot |
